11 commits

Author	SHA1	Message	Date
codex	81f2f59649	security: verify authenticated Forgejo routes live (FORGE6-ROUTES-001 r3) ... Revision 2 live run passed 24/25; the clean merge hit Forgejo's 405 during the mergeability recheck. Revision 3 waits for mergeable, retries only 405 (max 3) and records status codes. 7 boundary tests, isolated rehearsal (27 checks) and the attended live run (26/26, verified, cleanup confirmed) pass. Revision 2 proposal and receipts retained. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-18 02:33:46 +02:00
codex	bb3e2db07e	security: record KeyCape custody caller reconciliation and native config proof	2026-10-13 19:49:24 +02:00
codex	9c18673da1	security: close unauthenticated runner Docker exposure with native proof	2026-10-13 18:50:05 +02:00
codex	c12c087b89	security: prepare and rehearse contained Forgejo HTTP acceptance	2026-10-13 18:26:47 +02:00
codex	a3b56d689f	security: verify forge scanner expansion across 166 repositories	2026-10-13 17:59:50 +02:00
codex	9af8689327	security: close sync deadline fix and checkpoint scoped forge expansion	2026-10-13 16:55:37 +02:00
codex	8f770e1eea	security: recover Forgejo scanner custody and prove restart acceptance	2026-10-13 15:07:30 +02:00
codex	e570433060	security: verify Forgejo write paths and isolate lifecycle coverage gaps	2026-10-13 13:40:26 +02:00
codex	eb93eeedfd	security: preserve verified Forgejo scanner activation and reconcile recovery	2026-10-13 11:31:06 +02:00
codex	6502bfe4d8	security: establish native Forgejo receive-hook baseline	2026-10-12 18:15:56 +02:00
codex	355b6b9720	security: verify staged-secret enforcement across 22 workstation checkouts	2026-10-12 17:48:43 +02:00